@openclaw/matrix 2026.7.2-beta.5 → 2026.7.33

package/dist/.setup/crypto-state-store-B43k3z3W.mjs

@@ -0,0 +1,352 @@
+import { o as isRecord } from "./account-selection-BOQeTqax.mjs";
+import { t as getMatrixRuntime } from "./runtime-6S3DNFNv.mjs";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { createHash, randomUUID } from "node:crypto";
+//#region extensions/matrix/src/matrix/sqlite-state.ts
+function resolveStateDirOverride(options) {
+	if (!options) return;
+	if (options.stateDir) return options.stateDir;
+	if (options.stateRootDir) return options.stateRootDir;
+	return getMatrixRuntime().state.resolveStateDir(options.env ?? process.env, os.homedir);
+}
+function resolveMatrixSqliteStateKey(options) {
+	return resolveStateDirOverride(options) ?? "";
+}
+function resolveMatrixSqliteStateEnv(options) {
+	const stateDir = resolveStateDirOverride(options);
+	if (!stateDir) return options?.env;
+	return {
+		...options?.env ?? process.env,
+		OPENCLAW_STATE_DIR: stateDir
+	};
+}
+//#endregion
+//#region extensions/matrix/src/matrix/crypto-state-store.ts
+const STATE_KEY = "current";
+const RECOVERY_KEY_NAMESPACE = "recovery-key";
+const LEGACY_CRYPTO_MIGRATION_NAMESPACE = "legacy-crypto-migration";
+const IDB_SNAPSHOT_NAMESPACE = "idb-snapshot";
+const SMALL_STATE_MAX_ENTRIES = 10;
+const IDB_SNAPSHOT_MAX_ENTRIES = 2e4;
+const IDB_SNAPSHOT_MAX_CHUNKS = Math.floor(19999 / 2);
+const IDB_SNAPSHOT_CHUNK_BYTES = 24e3;
+const MATRIX_RECOVERY_KEY_FILENAME = "recovery-key.json";
+const MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME = "legacy-crypto-migration.json";
+const MATRIX_IDB_SNAPSHOT_FILENAME = "crypto-idb-snapshot.json";
+function openMatrixRecoveryKeyStoreOptions(storageRootDir) {
+	return {
+		namespace: RECOVERY_KEY_NAMESPACE,
+		maxEntries: SMALL_STATE_MAX_ENTRIES,
+		env: resolveMatrixSqliteStateEnv({ stateDir: storageRootDir })
+	};
+}
+function openMatrixLegacyCryptoMigrationStoreOptions(storageRootDir) {
+	return {
+		namespace: LEGACY_CRYPTO_MIGRATION_NAMESPACE,
+		maxEntries: SMALL_STATE_MAX_ENTRIES,
+		env: resolveMatrixSqliteStateEnv({ stateDir: storageRootDir })
+	};
+}
+function openMatrixIdbSnapshotStoreOptions(storageRootDir) {
+	return {
+		namespace: IDB_SNAPSHOT_NAMESPACE,
+		maxEntries: IDB_SNAPSHOT_MAX_ENTRIES,
+		env: resolveMatrixSqliteStateEnv({ stateDir: storageRootDir })
+	};
+}
+function readMatrixRecoveryKeyState(storageRootDir) {
+	return readMatrixRecoveryKeyStateWithKey({
+		storageRootDir,
+		stateKey: STATE_KEY
+	});
+}
+function readMatrixRecoveryKeyStateForPath(recoveryKeyPath) {
+	return readMatrixRecoveryKeyStateWithKey({
+		storageRootDir: path.dirname(recoveryKeyPath),
+		stateKey: resolveRecoveryKeyStateKeyForPath(recoveryKeyPath)
+	});
+}
+function readMatrixRecoveryKeyStateWithKey(params) {
+	return normalizeMatrixStoredRecoveryKey(openSyncStore(openMatrixRecoveryKeyStoreOptions(params.storageRootDir)).lookup(params.stateKey));
+}
+function writeMatrixRecoveryKeyState(params) {
+	writeMatrixRecoveryKeyStateWithKey({
+		storageRootDir: params.storageRootDir,
+		stateKey: STATE_KEY,
+		payload: params.payload
+	});
+}
+function writeMatrixRecoveryKeyStateForPath(params) {
+	writeMatrixRecoveryKeyStateWithKey({
+		storageRootDir: path.dirname(params.recoveryKeyPath),
+		stateKey: resolveRecoveryKeyStateKeyForPath(params.recoveryKeyPath),
+		payload: params.payload
+	});
+}
+function writeMatrixRecoveryKeyStateWithKey(params) {
+	const payload = normalizeMatrixStoredRecoveryKey(params.payload);
+	if (!payload) throw new Error("Invalid Matrix recovery key state");
+	openSyncStore(openMatrixRecoveryKeyStoreOptions(params.storageRootDir)).register(params.stateKey, payload);
+}
+async function hasMatrixRecoveryKeyStateInStore(params) {
+	return normalizeMatrixStoredRecoveryKey(await params.store.lookup(STATE_KEY)) !== null;
+}
+async function writeMatrixRecoveryKeyStateToStore(params) {
+	const payload = normalizeMatrixStoredRecoveryKey(params.payload);
+	if (!payload) throw new Error("Invalid Matrix recovery key state");
+	await params.store.register(STATE_KEY, payload);
+}
+function readMatrixLegacyCryptoMigrationState(storageRootDir) {
+	return normalizeMatrixLegacyCryptoMigrationState(openSyncStore(openMatrixLegacyCryptoMigrationStoreOptions(storageRootDir)).lookup(STATE_KEY));
+}
+function writeMatrixLegacyCryptoMigrationState(params) {
+	const state = normalizeMatrixLegacyCryptoMigrationState(params.state);
+	if (!state) throw new Error("Invalid Matrix legacy crypto migration state");
+	openSyncStore(openMatrixLegacyCryptoMigrationStoreOptions(params.storageRootDir)).register(STATE_KEY, state);
+}
+async function hasMatrixLegacyCryptoMigrationStateInStore(params) {
+	return normalizeMatrixLegacyCryptoMigrationState(await params.store.lookup(STATE_KEY)) !== null;
+}
+async function writeMatrixLegacyCryptoMigrationStateToStore(params) {
+	const state = normalizeMatrixLegacyCryptoMigrationState(params.state);
+	if (!state) throw new Error("Invalid Matrix legacy crypto migration state");
+	await params.store.register(STATE_KEY, state);
+}
+function readMatrixIdbSnapshotJson(storageRootDir) {
+	return readIdbSnapshotJsonFromStore(openSyncStore(openMatrixIdbSnapshotStoreOptions(storageRootDir)));
+}
+function hasMatrixIdbSnapshotState(storageRootDir) {
+	return isIdbSnapshotMeta(openSyncStore(openMatrixIdbSnapshotStoreOptions(storageRootDir)).lookup(idbMetaKey()));
+}
+function writeMatrixIdbSnapshotJson(params) {
+	writeIdbSnapshotJsonToStore({
+		snapshotJson: params.snapshotJson,
+		databaseCount: params.databaseCount,
+		store: openSyncStore(openMatrixIdbSnapshotStoreOptions(params.storageRootDir))
+	});
+}
+async function hasMatrixIdbSnapshotStateInStore(params) {
+	return await readIdbSnapshotJsonFromAsyncStore(params.store) !== null;
+}
+async function writeMatrixIdbSnapshotJsonToStore(params) {
+	const rows = buildIdbSnapshotRows(params.snapshotJson, params.databaseCount);
+	for (const row of rows.chunks) await params.store.register(row.key, row.value);
+	await params.store.register(rows.meta.key, rows.meta.value);
+	for (const row of await params.store.entries()) if (row.key.startsWith(idbChunkKeyPrefix()) && !rows.nextChunkKeys.has(row.key)) await params.store.delete(row.key);
+}
+function migrateLegacyMatrixRecoveryKeyFileToStore(storageRootDir) {
+	return migrateLegacyMatrixRecoveryKeyFilePathToStore(path.join(storageRootDir, MATRIX_RECOVERY_KEY_FILENAME));
+}
+function migrateLegacyMatrixRecoveryKeyFilePathToStore(recoveryKeyPath) {
+	const existing = readMatrixRecoveryKeyStateForPath(recoveryKeyPath);
+	const legacy = readLegacyMatrixRecoveryKeyFile(recoveryKeyPath);
+	if (!existing && legacy) writeMatrixRecoveryKeyStateForPath({
+		recoveryKeyPath,
+		payload: legacy
+	});
+	return archiveLegacyStateFileIfPossible(recoveryKeyPath);
+}
+function migrateLegacyMatrixLegacyCryptoMigrationFileToStore(storageRootDir) {
+	const existing = readMatrixLegacyCryptoMigrationState(storageRootDir);
+	const legacy = readLegacyMatrixLegacyCryptoMigrationState(storageRootDir);
+	if (!existing && legacy) writeMatrixLegacyCryptoMigrationState({
+		storageRootDir,
+		state: legacy
+	});
+	return archiveLegacyStateFileIfPossible(path.join(storageRootDir, MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME));
+}
+function readLegacyMatrixRecoveryKeyState(storageRootDir) {
+	return readLegacyMatrixRecoveryKeyFile(path.join(storageRootDir, MATRIX_RECOVERY_KEY_FILENAME));
+}
+function readLegacyMatrixRecoveryKeyFile(filePath) {
+	return readJsonFileSync(filePath, normalizeMatrixStoredRecoveryKey);
+}
+function readLegacyMatrixLegacyCryptoMigrationState(storageRootDir) {
+	return readJsonFileSync(path.join(storageRootDir, MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME), normalizeMatrixLegacyCryptoMigrationState);
+}
+function scoreMatrixCryptoStateInStore(storageRootDir) {
+	if (!matrixCryptoStateDatabaseExists(storageRootDir)) return 0;
+	let score = 0;
+	try {
+		if (readMatrixLegacyCryptoMigrationState(storageRootDir)) score += 3;
+	} catch {}
+	try {
+		if (readMatrixRecoveryKeyState(storageRootDir)) score += 2;
+	} catch {}
+	try {
+		if (hasMatrixIdbSnapshotState(storageRootDir)) score += 2;
+	} catch {}
+	return score;
+}
+function matrixCryptoStateDatabaseExists(storageRootDir) {
+	return fs.existsSync(path.join(storageRootDir, "state", "openclaw.sqlite"));
+}
+function resolveRecoveryKeyStateKeyForPath(recoveryKeyPath) {
+	const basename = path.basename(recoveryKeyPath);
+	if (basename === "recovery-key.json") return STATE_KEY;
+	return `file:${createHash("sha256").update(basename, "utf8").digest("hex").slice(0, 32)}`;
+}
+function normalizeMatrixStoredRecoveryKey(value) {
+	if (!isRecord(value) || value.version !== 1 || typeof value.createdAt !== "string" || typeof value.privateKeyBase64 !== "string" || !value.privateKeyBase64.trim()) return null;
+	return {
+		version: 1,
+		createdAt: value.createdAt,
+		keyId: typeof value.keyId === "string" ? value.keyId : null,
+		...typeof value.encodedPrivateKey === "string" ? { encodedPrivateKey: value.encodedPrivateKey } : {},
+		privateKeyBase64: value.privateKeyBase64,
+		...isRecord(value.keyInfo) ? { keyInfo: {
+			...value.keyInfo.passphrase !== void 0 ? { passphrase: value.keyInfo.passphrase } : {},
+			...typeof value.keyInfo.name === "string" ? { name: value.keyInfo.name } : {}
+		} } : {}
+	};
+}
+function normalizeMatrixLegacyCryptoMigrationState(value) {
+	if (!isRecord(value) || value.version !== 1 || typeof value.accountId !== "string") return null;
+	if (value.restoreStatus !== "pending" && value.restoreStatus !== "completed" && value.restoreStatus !== "manual-action-required") return null;
+	const roomKeyCounts = isRecord(value.roomKeyCounts) && typeof value.roomKeyCounts.total === "number" && typeof value.roomKeyCounts.backedUp === "number" ? {
+		total: value.roomKeyCounts.total,
+		backedUp: value.roomKeyCounts.backedUp
+	} : null;
+	return {
+		version: 1,
+		...value.source === "matrix-bot-sdk-rust" ? { source: value.source } : {},
+		accountId: value.accountId,
+		...typeof value.deviceId === "string" || value.deviceId === null ? { deviceId: value.deviceId } : {},
+		roomKeyCounts,
+		...typeof value.backupVersion === "string" || value.backupVersion === null ? { backupVersion: value.backupVersion } : {},
+		...typeof value.decryptionKeyImported === "boolean" ? { decryptionKeyImported: value.decryptionKeyImported } : {},
+		restoreStatus: value.restoreStatus,
+		...typeof value.detectedAt === "string" ? { detectedAt: value.detectedAt } : {},
+		...typeof value.restoredAt === "string" ? { restoredAt: value.restoredAt } : {},
+		...typeof value.importedCount === "number" ? { importedCount: value.importedCount } : {},
+		...typeof value.totalCount === "number" ? { totalCount: value.totalCount } : {},
+		...typeof value.lastError === "string" || value.lastError === null ? { lastError: value.lastError } : {}
+	};
+}
+function openSyncStore(options) {
+	return getMatrixRuntime().state.openSyncKeyedStore(options);
+}
+function readJsonFileSync(filePath, normalize) {
+	try {
+		return normalize(JSON.parse(fs.readFileSync(filePath, "utf8")));
+	} catch {
+		return null;
+	}
+}
+function archiveLegacyStateFileIfPossible(filePath) {
+	if (!fs.existsSync(filePath)) return false;
+	const archivedPath = `${filePath}.migrated`;
+	if (fs.existsSync(archivedPath)) return false;
+	fs.renameSync(filePath, archivedPath);
+	return true;
+}
+function readIdbSnapshotJsonFromStore(store) {
+	const meta = store.lookup(idbMetaKey());
+	if (!isIdbSnapshotMeta(meta)) return null;
+	const chunks = readIdbSnapshotChunks(meta, (key) => store.lookup(key));
+	return chunks ? chunks.join("") : null;
+}
+async function readIdbSnapshotJsonFromAsyncStore(store) {
+	const meta = await store.lookup(idbMetaKey());
+	if (!isIdbSnapshotMeta(meta)) return null;
+	const chunks = await readIdbSnapshotChunksAsync(meta, (key) => store.lookup(key));
+	return chunks ? chunks.join("") : null;
+}
+function readIdbSnapshotChunks(meta, lookup) {
+	const chunks = [];
+	for (let index = 0; index < meta.chunkCount; index += 1) {
+		const chunk = lookup(idbChunkKey(meta.generation, index));
+		if (!isIdbSnapshotChunk(chunk) || chunk.index !== index) return null;
+		chunks.push(chunk.data);
+	}
+	const snapshotJson = chunks.join("");
+	if (meta.digest !== digestText(snapshotJson)) return null;
+	return chunks;
+}
+async function readIdbSnapshotChunksAsync(meta, lookup) {
+	const chunks = [];
+	for (let index = 0; index < meta.chunkCount; index += 1) {
+		const chunk = await lookup(idbChunkKey(meta.generation, index));
+		if (!isIdbSnapshotChunk(chunk) || chunk.index !== index) return null;
+		chunks.push(chunk.data);
+	}
+	const snapshotJson = chunks.join("");
+	if (meta.digest !== digestText(snapshotJson)) return null;
+	return chunks;
+}
+function writeIdbSnapshotJsonToStore(params) {
+	const rows = buildIdbSnapshotRows(params.snapshotJson, params.databaseCount);
+	for (const row of rows.chunks) params.store.register(row.key, row.value);
+	params.store.register(rows.meta.key, rows.meta.value);
+	for (const row of params.store.entries()) if (row.key.startsWith(idbChunkKeyPrefix()) && !rows.nextChunkKeys.has(row.key)) params.store.delete(row.key);
+}
+function buildIdbSnapshotRows(snapshotJson, databaseCount) {
+	const generation = randomUUID().replaceAll("-", "");
+	const chunks = chunkText(snapshotJson).map((data, index) => ({
+		key: idbChunkKey(generation, index),
+		value: {
+			kind: "snapshot-chunk",
+			index,
+			data
+		}
+	}));
+	return {
+		chunks,
+		nextChunkKeys: new Set(chunks.map((chunk) => chunk.key)),
+		meta: {
+			key: idbMetaKey(),
+			value: {
+				kind: "meta",
+				version: 1,
+				generation,
+				chunkCount: chunks.length,
+				digest: digestText(snapshotJson),
+				databaseCount,
+				persistedAt: (/* @__PURE__ */ new Date()).toISOString()
+			}
+		}
+	};
+}
+function idbMetaKey() {
+	return `${STATE_KEY}:meta`;
+}
+function idbChunkKeyPrefix() {
+	return `${STATE_KEY}:snapshot:`;
+}
+function idbChunkKey(generation, index) {
+	return `${idbChunkKeyPrefix()}${generation}:${index}`;
+}
+function chunkText(value) {
+	const chunks = [];
+	let current = "";
+	let currentBytes = 0;
+	for (const char of value) {
+		const charBytes = Buffer.byteLength(char, "utf8");
+		if (current && currentBytes + charBytes > IDB_SNAPSHOT_CHUNK_BYTES) {
+			pushChunk(chunks, current);
+			current = "";
+			currentBytes = 0;
+		}
+		current += char;
+		currentBytes += charBytes;
+	}
+	if (current) pushChunk(chunks, current);
+	return chunks;
+}
+function pushChunk(chunks, chunk) {
+	if (chunks.length >= IDB_SNAPSHOT_MAX_CHUNKS) throw new Error("Matrix IndexedDB snapshot exceeds SQLite chunk limit");
+	chunks.push(chunk);
+}
+function digestText(value) {
+	return createHash("sha256").update(value, "utf8").digest("hex");
+}
+function isIdbSnapshotMeta(value) {
+	return isRecord(value) && value.kind === "meta" && value.version === 1 && typeof value.generation === "string" && value.generation.trim() !== "" && typeof value.chunkCount === "number" && Number.isSafeInteger(value.chunkCount) && value.chunkCount >= 0 && value.chunkCount <= IDB_SNAPSHOT_MAX_CHUNKS && typeof value.digest === "string" && typeof value.databaseCount === "number" && Number.isSafeInteger(value.databaseCount) && value.databaseCount >= 0 && typeof value.persistedAt === "string";
+}
+function isIdbSnapshotChunk(value) {
+	return isRecord(value) && value.kind === "snapshot-chunk" && typeof value.index === "number" && Number.isSafeInteger(value.index) && value.index >= 0 && typeof value.data === "string";
+}
+//#endregion
+export { writeMatrixLegacyCryptoMigrationState as C, writeMatrixRecoveryKeyStateToStore as D, writeMatrixRecoveryKeyStateForPath as E, resolveMatrixSqliteStateEnv as O, writeMatrixIdbSnapshotJsonToStore as S, writeMatrixRecoveryKeyState as T, readMatrixLegacyCryptoMigrationState as _, hasMatrixLegacyCryptoMigrationStateInStore as a, scoreMatrixCryptoStateInStore as b, migrateLegacyMatrixRecoveryKeyFilePathToStore as c, openMatrixLegacyCryptoMigrationStoreOptions as d, openMatrixRecoveryKeyStoreOptions as f, readMatrixIdbSnapshotJson as g, readLegacyMatrixRecoveryKeyState as h, hasMatrixIdbSnapshotStateInStore as i, resolveMatrixSqliteStateKey as k, migrateLegacyMatrixRecoveryKeyFileToStore as l, readLegacyMatrixRecoveryKeyFile as m, MATRIX_LEGACY_CRYPTO_MIGRATION_FILENAME as n, hasMatrixRecoveryKeyStateInStore as o, readLegacyMatrixLegacyCryptoMigrationState as p, MATRIX_RECOVERY_KEY_FILENAME as r, migrateLegacyMatrixLegacyCryptoMigrationFileToStore as s, MATRIX_IDB_SNAPSHOT_FILENAME as t, openMatrixIdbSnapshotStoreOptions as u, readMatrixRecoveryKeyState as v, writeMatrixLegacyCryptoMigrationStateToStore as w, writeMatrixIdbSnapshotJson as x, readMatrixRecoveryKeyStateForPath as y };

package/dist/.setup/deps-Dy6yreL4.mjs

@@ -0,0 +1,236 @@
+import { createRequire } from "node:module";
+import fs from "node:fs";
+import path from "node:path";
+import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import { spawn } from "node:child_process";
+//#region extensions/matrix/src/matrix/deps.ts
+const REQUIRED_MATRIX_PACKAGES = [
+	"matrix-js-sdk",
+	"@matrix-org/matrix-sdk-crypto-nodejs",
+	"@matrix-org/matrix-sdk-crypto-wasm"
+];
+const MIN_MATRIX_CRYPTO_NATIVE_BINDING_BYTES = 1e6;
+const MATRIX_COMMAND_OUTPUT_TAIL_BYTES = 65536;
+const MATRIX_STREAM_ERROR_KILL_GRACE_MS = 1e3;
+function resolveMissingMatrixPackages(resolveFn) {
+	const resolve = resolveFn ?? defaultResolveFn;
+	return REQUIRED_MATRIX_PACKAGES.filter((pkg) => {
+		try {
+			resolve(pkg);
+			return false;
+		} catch {
+			return true;
+		}
+	});
+}
+function isMatrixSdkAvailable() {
+	return resolveMissingMatrixPackages().length === 0;
+}
+function buildMatrixDepsMissingMessage(missing) {
+	return [`Matrix plugin dependencies are missing: ${missing.join(", ")}.`, "Repair this plugin with `openclaw plugins update matrix` or run `openclaw doctor --fix`."].join(" ");
+}
+let defaultMatrixCryptoRuntimeEnsurePromise = null;
+function appendBoundedOutputTail(current, chunk) {
+	const chunkBuffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+	if (chunkBuffer.byteLength >= 65536) return chunkBuffer.subarray(chunkBuffer.byteLength - MATRIX_COMMAND_OUTPUT_TAIL_BYTES).toString("utf8");
+	const currentBuffer = Buffer.from(current);
+	if (currentBuffer.byteLength + chunkBuffer.byteLength <= 65536) return `${current}${chunkBuffer.toString("utf8")}`;
+	const currentTailBytes = MATRIX_COMMAND_OUTPUT_TAIL_BYTES - chunkBuffer.byteLength;
+	const currentTail = currentBuffer.subarray(currentBuffer.byteLength - currentTailBytes);
+	return Buffer.concat([currentTail, chunkBuffer], MATRIX_COMMAND_OUTPUT_TAIL_BYTES).toString("utf8");
+}
+async function runFixedCommandWithTimeout(params) {
+	return await new Promise((resolve) => {
+		const [command, ...args] = params.argv;
+		if (!command) {
+			resolve({
+				code: 1,
+				stdout: "",
+				stderr: "command is required"
+			});
+			return;
+		}
+		const proc = spawn(command, args, {
+			cwd: params.cwd,
+			env: {
+				...process.env,
+				...params.env
+			},
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		let stdout = "";
+		let stderr = "";
+		let settled = false;
+		let timer = null;
+		let streamKillTimer = null;
+		let streamErrorMessage = null;
+		const killChildOnExit = () => {
+			if (!settled && proc.exitCode === null) proc.kill("SIGTERM");
+		};
+		const finalize = (result) => {
+			if (settled) return;
+			settled = true;
+			if (timer) clearTimeout(timer);
+			if (streamKillTimer) clearTimeout(streamKillTimer);
+			process.off("exit", killChildOnExit);
+			resolve(result);
+		};
+		process.once("exit", killChildOnExit);
+		proc.stdout?.on("data", (chunk) => {
+			stdout = appendBoundedOutputTail(stdout, chunk);
+		});
+		proc.stderr?.on("data", (chunk) => {
+			stderr = appendBoundedOutputTail(stderr, chunk);
+		});
+		const failReadableStream = (streamName) => (error) => {
+			if (settled || streamErrorMessage) return;
+			streamErrorMessage = `${streamName} stream failed: ${formatErrorMessage(error)}`;
+			if (proc.exitCode === null) proc.kill("SIGTERM");
+			streamKillTimer = setTimeout(() => {
+				if (!settled && proc.exitCode === null) proc.kill("SIGKILL");
+			}, MATRIX_STREAM_ERROR_KILL_GRACE_MS);
+			streamKillTimer.unref?.();
+		};
+		proc.stdout?.on("error", failReadableStream("stdout"));
+		proc.stderr?.on("error", failReadableStream("stderr"));
+		timer = setTimeout(() => {
+			proc.kill("SIGKILL");
+			if (streamErrorMessage) return;
+			finalize({
+				code: 124,
+				stdout,
+				stderr: stderr || `command timed out after ${params.timeoutMs}ms`
+			});
+		}, params.timeoutMs);
+		proc.on("error", (err) => {
+			if (streamErrorMessage) return;
+			finalize({
+				code: 1,
+				stdout,
+				stderr: err.message
+			});
+		});
+		proc.on("close", (code) => {
+			const streamErrorStderr = streamErrorMessage ? stderr ? appendBoundedOutputTail(stderr, `\n${streamErrorMessage}`) : streamErrorMessage : stderr;
+			finalize({
+				code: streamErrorMessage ? 1 : code ?? 1,
+				stdout,
+				stderr: streamErrorStderr
+			});
+		});
+	});
+}
+function defaultRequireFn(id) {
+	return createRequire(import.meta.url)(id);
+}
+function defaultResolveFn(id) {
+	return createRequire(import.meta.url).resolve(id);
+}
+function isMissingMatrixCryptoRuntimeError(error) {
+	const message = formatErrorMessage(error);
+	return message.includes("@matrix-org/matrix-sdk-crypto-nodejs-") || message.includes("matrix-sdk-crypto-nodejs") || message.includes("download-lib.js");
+}
+function isMuslRuntime() {
+	try {
+		return !(process.report?.getReport?.())?.header?.glibcVersionRuntime;
+	} catch {
+		return true;
+	}
+}
+function resolveMatrixCryptoNativeBindingFilename() {
+	switch (process.platform) {
+		case "darwin": return process.arch === "arm64" ? "matrix-sdk-crypto.darwin-arm64.node" : process.arch === "x64" ? "matrix-sdk-crypto.darwin-x64.node" : null;
+		case "linux":
+			if (process.arch === "x64") return isMuslRuntime() ? "matrix-sdk-crypto.linux-x64-musl.node" : "matrix-sdk-crypto.linux-x64-gnu.node";
+			if (process.arch === "arm64" && !isMuslRuntime()) return "matrix-sdk-crypto.linux-arm64-gnu.node";
+			if (process.arch === "arm") return "matrix-sdk-crypto.linux-arm-gnueabihf.node";
+			if (process.arch === "s390x") return "matrix-sdk-crypto.linux-s390x-gnu.node";
+			return null;
+		case "win32": return process.arch === "x64" ? "matrix-sdk-crypto.win32-x64-msvc.node" : process.arch === "ia32" ? "matrix-sdk-crypto.win32-ia32-msvc.node" : process.arch === "arm64" ? "matrix-sdk-crypto.win32-arm64-msvc.node" : null;
+		default: return null;
+	}
+}
+function resolveMatrixCryptoNativeBindingPath(resolveFn) {
+	const filename = resolveMatrixCryptoNativeBindingFilename();
+	if (!filename) return null;
+	try {
+		return path.join(path.dirname(resolveFn("@matrix-org/matrix-sdk-crypto-nodejs/download-lib.js")), filename);
+	} catch {
+		return null;
+	}
+}
+function removeIncompleteMatrixCryptoNativeBinding(params) {
+	const bindingPath = params.bindingPath;
+	if (!bindingPath) return;
+	try {
+		const stat = fs.statSync(bindingPath);
+		if (!stat.isFile() || stat.size >= MIN_MATRIX_CRYPTO_NATIVE_BINDING_BYTES) return;
+		fs.unlinkSync(bindingPath);
+		params.log?.(`matrix: removed incomplete native crypto runtime (${stat.size} bytes); it will be downloaded again`);
+	} catch (error) {
+		if (error.code !== "ENOENT") throw error;
+	}
+}
+async function ensureMatrixCryptoRuntime(params = {}) {
+	const usesDefaultRuntime = !params.requireFn && !params.resolveFn;
+	if (usesDefaultRuntime && defaultMatrixCryptoRuntimeEnsurePromise) {
+		await defaultMatrixCryptoRuntimeEnsurePromise;
+		return;
+	}
+	const ensurePromise = ensureMatrixCryptoRuntimeOnce(params);
+	if (!usesDefaultRuntime) {
+		await ensurePromise;
+		return;
+	}
+	defaultMatrixCryptoRuntimeEnsurePromise = ensurePromise.catch((error) => {
+		defaultMatrixCryptoRuntimeEnsurePromise = null;
+		throw error;
+	});
+	await defaultMatrixCryptoRuntimeEnsurePromise;
+}
+async function ensureMatrixCryptoRuntimeOnce(params) {
+	const resolveFn = params.resolveFn ?? defaultResolveFn;
+	const nativeBindingPath = resolveMatrixCryptoNativeBindingPath(resolveFn);
+	removeIncompleteMatrixCryptoNativeBinding({
+		bindingPath: nativeBindingPath,
+		log: params.log
+	});
+	const requireFn = params.requireFn ?? defaultRequireFn;
+	try {
+		requireFn("@matrix-org/matrix-sdk-crypto-nodejs");
+		return;
+	} catch (err) {
+		if (!isMissingMatrixCryptoRuntimeError(err)) throw err;
+	}
+	const scriptPath = resolveFn("@matrix-org/matrix-sdk-crypto-nodejs/download-lib.js");
+	params.log?.("matrix: bootstrapping native crypto runtime");
+	const result = await runFixedCommandWithTimeout({
+		argv: [process.execPath, scriptPath],
+		cwd: path.dirname(scriptPath),
+		timeoutMs: 3e5,
+		env: { COREPACK_ENABLE_DOWNLOAD_PROMPT: "0" }
+	});
+	if (result.code !== 0) {
+		removeIncompleteMatrixCryptoNativeBinding({
+			bindingPath: nativeBindingPath,
+			log: params.log
+		});
+		throw new Error(result.stderr.trim() || result.stdout.trim() || "Matrix crypto runtime bootstrap failed.");
+	}
+	removeIncompleteMatrixCryptoNativeBinding({
+		bindingPath: nativeBindingPath,
+		log: params.log
+	});
+	requireFn("@matrix-org/matrix-sdk-crypto-nodejs");
+}
+async function ensureMatrixSdkInstalled(params) {
+	const missing = resolveMissingMatrixPackages(params?.resolveFn);
+	if (missing.length === 0) return;
+	throw new Error(buildMatrixDepsMissingMessage(missing));
+}
+//#endregion
+export { ensureMatrixSdkInstalled as n, isMatrixSdkAvailable as r, ensureMatrixCryptoRuntime as t };

package/dist/.setup/device-health-D4LBxuPq.mjs

@@ -0,0 +1,16 @@
+//#region extensions/matrix/src/matrix/device-health.ts
+const OPENCLAW_DEVICE_NAME_PREFIX = "OpenClaw ";
+function isOpenClawManagedMatrixDevice(displayName) {
+	return displayName?.startsWith(OPENCLAW_DEVICE_NAME_PREFIX) === true;
+}
+function summarizeMatrixDeviceHealth(devices) {
+	const currentDeviceId = devices.find((device) => device.current)?.deviceId ?? null;
+	const openClawDevices = devices.filter((device) => isOpenClawManagedMatrixDevice(device.displayName));
+	return {
+		currentDeviceId,
+		staleOpenClawDevices: openClawDevices.filter((device) => !device.current),
+		currentOpenClawDevices: openClawDevices.filter((device) => device.current)
+	};
+}
+//#endregion
+export { isOpenClawManagedMatrixDevice, summarizeMatrixDeviceHealth };